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10 RAC.KGROUNn DFTHF INVENTION 

1 ) Field of the Invention 

The present invention relates to a technology for generating validation items to 

create an input/output sequence called a test pattern. 

15 2) Description of the Related Art 

Conventionally, a large scale integrated circuit (LSI) design necessitates a 
validation process to validate a normal operation of the LSI, as well as an improvement 
in work efficiency by shortening a time for the design. Particularly, the validation 
process is an indispensable step to maintain high quality of the LSI that requires large 
20 scale, advanced function, high speed, and low power consumption. 

In the validation process, a series of input/output sequences called a test 
pattern is created. An input signal is given to the LSI based on the input/output 
sequence, and it is confirmed whether an output signal from the LSI coincides with an 
expectation value. With this arrangement, it is possible to validate whether an 
25 apparatus is operating as expected. However, there are an enormous number of 
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functional devices within the LSI. With this situation, manual listing of a data flow (i.e., 
a sequence) between all the functional devices is difficult, and the input/output 
sequence (i.e., the test pattern) generation is complicated. 

Conventionally, there is a method of extracting the input/output sequence from 
5 a functional block diagram created by using a predetermined description language. 
According to the method, the functional block diagram expresses the apparatus to be 
validated as a functional device and a data flow between the functional devices. A 
graph is created by replacing the functional devices and the data flow with nodes 
edges, respectively Then, one sequence is specified through one path on the graph. 
10 As a result, an input/output sequence that is given to the apparatus to be validated can 
be listed. The conventional method is described in, for example, J. Ryser, M. Glinz, "A 
Scenario-Based Approach to Validating and Testing Software Systems Using 
Statecharts", 12 th Intl. Conf. on Software Engineering and their Applications, Dec. 1999. 
However, since the functional devices in the LSI operate in parallel based on a 
15 parallel execution of the hardware, the conventional method, which can only take a 
path on the graph into consideration one by one, cannot handle a simultaneous 
execution of a plurality of sequences. Further, the conventional method does not take 
into account a resource constraint specific to a hardware such as sharing and 
exclusive utilization of functional devices in the apparatus to be validated like the LSI. 

Therefore, the input/output sequence listed by the conventional method 
actually includes a non-executable input/output sequence. An attempt to carry out the 
validation by using the non-executable input/output sequence becomes a failure. 
Consequently, work time and labor become wasteful, and a design time becomes 
longer. 

25 
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SI IMMARY < ">F THF INVENTION 

It is an object of the present invention to solve at least the problems in the 

conventional technology. 

The method of validation support according to one aspect of the present 
invention includes inputting functional configuration information that represents a 
function of an apparatus to be validated, inputting a condition for an input/output 
sequence that is assigned to the apparatus, generating a validation item function that 
satisfies all conditions for the input/output sequence, based on the functional 
configuration information, and extracting a combination of configuration elements that 
constitute the functional configuration information as a validation item, based on the 

validation item function. 

The computer program according to another aspect of the present invention 
realizes the methods according to the present invention on a computer. 

The apparatus for validation support according to still another aspect of the 
present invention includes an information input unit that inputs functional configuration 
information that represents a function of an apparatus to be validated, a condition input 
unit that inputs a condition for an input/output sequence that is given to the apparatus, 
a generation unit that generates a validation item function that satisfies all conditions for 
the input/output sequence, based on the functional configuration information, and an 
20 extraction unit that extracts a combination of configuration elements that constitute the 
functional configuration information as a validation item, based on the validation item 
function. 

The other objects, features and advantages of the present invention are 
specifically set forth in or will become apparent from the following detailed descriptions 
25 of the invention when read in conjunction with the accompanying drawings. 
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RPIFF nFRP.RIPTIQN Q FTHF DRAWINGS 

Fig. 1 is a block diagram of a validation support apparatus according to a first 
embodiment and a second embodiment of the present invention, with an information 
5 terminal apparatus according to the second embodiment; 

Fig. 2 is a block diagram of functional configuration information of an 
apparatus to be validated according to the first embodiment; 

Fig. 3 is a graph converted from the functional configuration information of the 
apparatus to be validated according to the first embodiment; 
10 Fig. 4 is a table of a relationship between node numbers and Boolean 

variables in the apparatus to be validated according to the first embodiment; 

Fig. 5 is a table of a relationship between edge numbers and Boolean 
variables in the apparatus to be validated according to the first embodiment; 

Fig. 6 is a block diagram of functional configuration of the validation support 
1 5 apparatus according to the first embodiment; 

Fig. 7 is an example of a binary decision diagram (BDD) that is applied to the 
validation support apparatus according to the first embodiment; 

Fig. 8 is a configuration of data stored in a validation cost database of the 
validation support apparatus according to the first embodiment; 
20 Fig. 9 is a flowchart of an example of a validation item extraction process of 

the validation support apparatus according to the first embodiment; 

Fig. 10 is an example of a table (part one) listing validation item functions 
generated by the validation support apparatus according to the first embodiment in the 
BDD format; 

25 Fig. 1 1 is an example of a table (part two) listing validation item functions 
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generated by the validation support apparatus according to the first embodiment in the 
BDD format; 

Fig. 1 2 is an example of a table (part three) listing validation item functions 
generated by the validation support apparatus according to the first embodiment in the 
5 BDD format; 

Fig. 1 3 is a flowchart of another example of a validation item extraction 
process of the validation support apparatus according to the first embodiment; 

Fig. 14 is a schematic diagram of a validation support system according to the 
second embodiment; 

10 Fig. 1 5 is a block diagram of a functional configuration of an information 

terminal apparatus according to the second embodiment; 

Fig. 16 is a configuration of data stored in a use case display information 
database of the information terminal apparatus according to the second embodiment; 
Fig. 17 is a configuration of data stored in a use case description information 
15 database of the information terminal apparatus according to the second embodiment; 

Fig. 1 8 is a configuration of data stored in an actor description information 
database of the information terminal apparatus according to the second embodiment; 

Fig. 1 9 is a use case diagram of an apparatus to be validated created by the 
information terminal apparatus according to the second embodiment; 
20 Fig. 20 is a use case diagram in which description information included in the 

use case diagram shown in Fig. 19 is converted into code information; 

Fig. 21 is a block diagram of a functional configuration of the validation support 
apparatus according to the second embodiment; 

Fig. 22 is a configuration of data stored in a validation cost database of the 
25 validation support apparatus according to the second embodiment; 
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Fig. 23 is a flowchart of an example of an extraction process of the validation 
support apparatus according to the second embodiment; 

Fig. 24 is a table of validation items and validation costs extracted by the 
validation support apparatus according to the second embodiment; 
5 Fig. 25 is a table of validation items and validation costs that are converted into 

original description information from code information included in the validation items 
and the validation cost shown in Fig. 24; 

Fig. 26 is a flowchart of an example of an input/output sequence creation 
process of the validation support apparatus according to the second embodiment; 
10 Fig. 27 is an example of a validation environment created by the information 

terminal apparatus according to the second embodiment; 

Fig. 28 is the input/output sequence created by the validation support 
apparatus according to the second embodiment; and 

Fig. 29 is a time chart of the input/output sequence shown in Fig. 28. 
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nFTAII Fn DFSCRIPTION 

Exemplary embodiments of a method and an apparatus for validation support, 
i computer product for the validation support according to the present invention are 
3xplained in detail with reference to the accompanying drawings. The validation 
20 support apparatus extracts validation items that become a source for creating an 

input/output sequence called a test pattern, in order to validate whether an apparatus 
to be validated operates normally. The validation support apparatus gives the 
input/output sequence obtained from the validation items to the apparatus to be 
validated to validate the apparatus. 
25 Fig. 1 is a block diagram of a validation support apparatus according to a first 
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embodiment and a second embodiment of the present invention, with an information 
terminal apparatus according to the second embodiment. The validation support 
apparatus comprises a central processing unit (CPU) 101 , a read-only memory (ROM) 
102, a random access memory (RAM) 103, a hard disk drive (HDD) 104, a hard disk 
5 (HD) 105, a flexible drive disk (FDD) 106, a flexible disk (FD) 107, adisplay 108, an 
interface (l/F) 109, a keyboard 110, a mouse 111 , a scanner 112, and a printer 113. 
These constituent units are connected to each other via a bus 1 00. 

The CPU 1 01 controls the total validation support apparatus. The ROM 1 02 
stores a program such as a boot program. The RAM 1 03 is used as a work area of 
10 the CPU 101 . The HDD 104 controls read and write of data from and to the HDD 105 
according to the conlrol from the CPU 1 01 . The HD 1 05 stores the data written 
based on the control from the HDD 104. 

The FDD 1 06 controls read and write of data from and to the FDD 1 07 
according to the control from the CPU 101. The FDD 107 stores the data written 
15 based on the control from the FDD 106, and makes the validation support apparatus 
read the data stored in the FD 1 07. 

As detachable recording mediums, a CD-ROM (CD-R, CD-RW), a magnet 
optical (MO), a digital versatile disk (DVD), and a memory card may be used in addition 
to the FD 107. The display 108 displays a cursor, an icon, a tool box, and data such 
20 as a document, an image, and functional information. A cathode ray tube (CRT), a 
thin film transistor (TFT) liquid crystal display, and a plasma display can be employed 
for the display 108. 

The l/F 109 is connected to a network such as the Internet via a 
communication line, and is further connected to other apparatuses via the network. 
25 The l/F 1 09 interfaces between the network 11 4 and the inside of the validation support 
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apparatus, thereby to control the input and output of data from and to external 
apparatuses. Amodem and a local area network (LAN) adapter can be used for the 
l/F 109. 

The keyboard 11 0 has keys to input characters, numerals, and various kinds 
of instructions to input data. Thekeyboard 110 may be a touch-panel input pad or ten 
keys. The mouse 111 is used to move the cursor, select a range, move windows, and 
changesizesofthewindows. Themouse111 may be a track ball or a joystick so far 
as this has functions of a pointing device. 

The scanner 112 optically reads an image to fetch image data into the 
validation support apparatus. The scanner 112 may have the OCR function. The 
printer 1 1 3 prints image data and document data. A laser printer or an Inkjet printer 
may be used for the printer 113. 

Functional configuration information of the apparatus to be validated will be 
explained next. Fig. 2 is a block diagram of functional configuration information of an 
apparatus to be validated according to the first embodiment. The functional 
configuration information can be created by a predetermined description language 
such as a unified modeling language (UML). As one example of the functional 
configuration information, a use case diagram or a sequence diagram is available. As 
one example, the case of using a DVD/HDD video recorder as an apparatus to be 

validated will be explained. 

As shown in Fig. 2, a DVD/HDD video recorder 200 as the apparatus to be 
validated has functional devices and configuration elements. The functional devices 
include a video input unit 201 , an HD input unit 202, a DVD-R/W input unit 203, an 
encoder 204, a decoder 205, a video output unit 206, an HD output unit 207, and a 
5 DVD-R/W output unit 208. The configuration elements include signal lines 21 1 to 21 8 
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that connect between the functional devices. 

The video input unit 201 inputs video data. The HD input unit 202 inputs 
moving picture expert group (MPEG) data read from the HD. The DVD-R/W input 
unit 203 inputs the MPEG data read from a DVD-R/W disk The encoder 204 
5 encodes the video data input from the video input unit 201 into MPEG data. 

The decoder 205 decodes the MPEG data input from the HD input unit 202 or 
the DVD-R/W input unit 203 into video data. The video output unit 206 outputs the 
video data input from the video input unit 201 or the video data decoded by the 
decoder 205. The HD output unit 207 and the DVD-R/W output unit 208 output the 
10 MPEG data encoded by the encoder 204, and write the MPEG data into the HD and 
the DVD-R/W disk respectively. 

A graph illustrating the function block diagram shown in Fig. 2 will be explained 
next. Fig. 3 is a graph converted from the functional configuration information of the 
apparatus shown in Fig. 2. This graph 300 illustrates a conversion of the functional 
15 devices (i.e., the video input unit 201 , the HD input unit 202, the DVD-R/W input unit 
203, the encoder 204, the decoder 205, the video output unit 206, the HD output unit 
207, and the DVD-R/W output unit 208) into nodes 301 to 308, and a conversion of the 
signal lines 211 to 218 that connect between the functional devices into edges 311 to 
31 7 respectively. The following Boolean variables are given to the nodes 301 to 308 
20 and the edges 31 1 to 31 7 respectively. 

In the example shown in Fig. 3, the following eight Boolean variables are 
defined for the nodes 301 to 308. As shown in Fig. 4, the Boolean variables are 
related to the nodes 301 to 308 respectively. As shown in Fig. 5, the Boolean 
variables are related to the edges 311 to 317 obtained by the conversion respectively. 
25 Fig. 6 is a block diagram of functional configuration of the validation support 
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apparatus according to the first embodiment. A validation support apparatus 600 
comprises afunctional configuration information input unit 601 , a graph conversion unit 
602, a condition input unit 603, a logical expression conversion unit 604, a validation 
item function generation unit 605, a validation item function memory unit 606, a 
5 validation cost database 607, a validation cost calculation unit 608, and a validation 

item extraction unit 609. 

The functional configuration information input unit 601 inputs functional 
configuration information that expresses a functional configuration of an apparatus to 
be validated. The functional configuration information is the functional block diagram 
10 200 that illustrates the functional configuration of the validation support apparatus as 
shown in Fig. 2. The functional configuration information includes the configuration 
elements consisting of the functional devices 201 to 208 and the signal lines 211 to 218 
between the functional devices (i.e., a data flow between the functional devices). 

The graph conversion unit 602 converts the functional block diagram 200 of 
15 the apparatus to be validated input to the functional configuration information input unit 
601 (see Fig. 2), into the graph 300 (see Fig. 3) that includes the nodes 301 to 308 and 
theedges311 to317. In other words, the graph conversion unit 602 converts the 
functional devices 201 to 208 in the functional block diagram 200 into the nodes 301 to 
308, and converts the signal lines 211 to 21 8 that connect between the functional 
20 devices (i.e., the data flow between the functional devices) into the edges 311 to 31 7. 

The condition input unit 603 inputs conditions regarding the input/output 
sequence that is given to the apparatus to be validated. For the conditions regarding 
the input/output sequence, there are a condition for a starting point and an end point of 
the input/output sequence (condition 1 ), a condition for connection of the edges 
25 (condition 2), a condition for a fan-out of the functional devices (condition 3), a condition 
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for a fan-in of the functional devices (condition 4), a resource constraint condition for 
the functional devices (condition 5), and a condition that limits a configuration element 
to be validated among the configuration elements that constitute the functional block 
diagram (condition 6). 

5 The logical expression conversion unit 604 converts the graph 300 consisting 

of the nodes 301 to 308 and the edges 311 to 31 7 obtained by the graph conversion 
unit 602, and the input/output sequence input by the condition input unit 603, into 
logical expressions. This logical expression is created according to a Boolean 
algebra. Details of the conversion into the logical expression will be explained later. 
10 The validation item function generation unit 605 generates validation item 

functions using a binary decision diagram (BDD), based on the generated logical 
expression. The validation item function memory unit 606 stores the generated 
validation item fijnctions. The BDD is a data configuration that expresses the logic 
function in compact by using the graph as shown in Fig. 7. The BDD is explained in 
15 detail in, for example, R. E. Bryant, "Graph^ased Algorithms for Boolean Function 
Manipulation", IEEE Trans, on Computers, C-35, August 1 986. 

As shown in Fig. 8, the validation cost database 607 stores the Boolean 
variables shown in Fig. 4 by relating them to costs that become weights. Significance 
of the validation of the functional devices 201 to 208 (i.e., node 301 to 308) 
20 corresponding to the Boolean variables can be expressed by using these costs. A 
functional device corresponding to a Boolean variable having "I" as its cost can be 
defined as an existing design. Afunctional device corresponding to a Boolean 
variable having "Z as its cost can be defined as a diversion design. Afunctional 
device corresponding to a Boolean variable having "5" as its cost can be defined as a 
25 new design. In other words, when the cost is higher, the significance of the validation 
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is higher, and when the cost is lower, the significance of the validation is lower. 

The validation cost calculation unit 608 calculates validation costs of the 
validation items extracted by the validation item extraction unit 609. For example, the 
costs that become the weights are added beforehand to the nodes 301 to 308 
5 obtained by the graph conversion unit 602, thereby to add the costs of the nodes 

included in the extracted validation items. With this arrangement, the validation costs 
are calculated. The calculated validation costs are output to the validation item 

extraction unit 609. 

The validation item extraction unit 609 extracts a combination of the 
1 o configuration elements that constitute the functional configuration information as 

validation items from the validation items stored in the validation item function memory 
unit 606. Specifically, the validation item extraction unit 609 extracts the validation 
items by obtaining sets of Boolean variables that make the validation item function as 
"1 ". These validation items can be extracted by using the BDD. 
1 5 The validation item extraction unit 609 extracts n validation items set in 

advance. The validation item extraction unit 609 extracts the n validation items based 
on the costs of the validation items calculated by the validation cost calculation unit 608. 
For example, the validation items may be laid out in the order of the validation costs 
thereby to extract the validation items up to the n-th validation item. Alternatively, the 
20 n validation items may be generated in the order of the calculated costs by using a 

method introduced in "Algorithm Dictionary" by Koichi Shimada et al., the paragraph of 
"the shortest route (graph)", pp. 279 to 280, Kyoritsu Shuppan Co., Ltd., 1994. 

The functional configuration information input unit 601 , the graph conversion 
unit 602, the condition input unit 603, the logical expression conversion unit 604, the 
25 validation item function generation unit 605, the validation cost calculation unit 608, and 
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the validation item extraction unit 609 achieve their functions as follows. In other 
words, the CPU 101 executes programs stored in the ROM 102, the RAM 103, the HD 
1 05, and the FD 1 07, or via the l/F 1 09. The validation item function memory unit 606 
and the validation cost database 607 achieve their functions using the ROM 102, the 
5 RAM 1 03, the HD 1 05, and the FD 1 07 shown in Fig. 1 . 

The conversion from the condition regarding the input/output sequence into 
the logical expression will be explained next. As explained above, the conditions 
regarding the input/output sequence include the condition for a starting point and an 
end point of the input/output sequence (condition 1 ), the condition for connection of the 
10 edges (condition 2), the condition for a fan-out of the functional devices (condition 3), 
the condition for a fan-in of the functional devices (condition 4), the resource constraint 
condition for the functional devices (condition 5), and the condition that limits a 
configuration element to be validated among the configuration elements 201 to 208, 
and 211 to 218 that constitute the functional block diagram 200 (condition 6). 
1 5 Negation, logical sum, logical product, unanimity, and equivalence in the 

Boolean algebra are expressed by T, "+", ~\ "->", and "=" respectively. "A^ B" has 
the same meaning as "! A + B", and "A = B" has the same meaning as "(A -* B) * (B -> 
A)" 

A node of a start of the input/output sequence is set as a "starting point" A 
20 node of an end of the input/output sequence is set as an "end point". In order to work 
out the input/output sequence, the logical sum of the Boolean variable of the node of 
the starting point needs to be "1". Similarly, the logical sum of the Boolean variable of 
the node of the end point also needs to be "1 ". In the example shown in Fig. 2 and 
Fig. 3, nodes of the starting points are the nodes 301 to 303. Nodes of the end points 
25 are the nodes 306 to 308. Therefore, the condition 1 can be converted into the 
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following logical expressions by using the Boolean variables. 

inVideo + inDVD + inHDD ( 1 ) 

outVideo + outDVD + outHDD ( 2 ) 
When data flows on the edges 311 to 317, the functional devices 
5 corresponding to the nodes at both ends of the edges need to be operating. The 
edge 311 (Boolean variable: inVideo_outVideo) shown in Fig. 3 can be expressed by 

the following expression. 

inVideo_outVideo -> inVideo * outVideo ■ • ( 3 ) 

The other edges 312 to 317 can also be expressed by the following logical 

10 expressions. 

inVideo_encMPEG -» inVideo * encMPEG ( 4 ) 

inDVD_decMP EG -> inDVD * decMPEG ( 5 ) 

inHDDjdecMPEG -> inHDD * decMPEG ( 6 ) 

decMPEG_outVideo^dedv1PEG* outVideo (?) 

1 5 encMPEG_outDVD encMPEG * outDVD ( 8 ) 

encMPEG_outHDD -» encMPEG * outHDD ( 9 ) 
When a functional device corresponding to a certain node operates, data is 
transmitted to a functional device corresponding to the next node via any one of the 
fan-out edges. On the other hand, when any one of the fan-out edges of a functional 
20 device corresponding to a certain node is transmitting data, this functional device 
needs to be operating. This condition is expressed by the following logical 
expression. 

For example, the node 301 (Boolean variable: inVideo) shown in Fig. 3 has 
the edge 311 (Boolean variable: inVideo_outVideo) and the edge 312 (Boolean 
25 variable: inVideo_encMPEG) as the fan-out edges. Therefore, this condition can be 
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expressed by the following logical expression. 

inVideo = inVideo_outVideo + inVideo_encMPEG (1 0) 

Similarly, fan-out edges of the other functional devices can also be expressed 
by the following expressions. 
5 inDVD = inDVD_decMPEG ( 1 1 ) 

inHDD = inHDD_decMPEG ( 1 2 ) 

decMPEG = decMPEG_outV1deo ( 1 3 ) 

encMPEG = encMPEG_outDVD + encMPEG_outHDD (1 4) 

The condition 4 is similar to the condition 3. When a functional device 
1 o corresponding to a certain node operates, data is transmitted from a pre-stage 

functional device via any one of the fan-in edges. On the other hand, when any one 
of the fan-in edges of a functional device corresponding to a certain node is 
transmitting data, this functional device needs to be operating. This condition is 
expressed by the following logical expression. 
1 5 For example, the node 305 (Boolean variable: decMPEG) shown in Fig. 3 has 

the edge 313 (Boolean variable: inDVD_ decMPEG) and the edge 314 (Boolean 
variable: inHDD_decMPEG) as the fan-in edges. Therefore, this condition can be 
expressed by the following logical expression. 

decMPEG = inDVDjdecMPEG + inHDDjdecMPEG (1 5) 

20 Similarly fan-in edges of the other Hinctional devices can also be expressed 

by the following expressions. 

encMPEG = inVideo_encMPEG ( 1 6 ) 

outVideo = inVideo_outVideo + decMPEG_outVideo (1 7) 

outDVD = encMPEG_outDVD ( 1 8 ) 

25 outHDD = encMPEG_outHDD ( 19 ) 
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An attempt to simultaneously execute a plurality of input/output sequences 
might fail because of a constraint in the resource of a functional device corresponding 
to a certain node. For example, even when a functional device corresponding to a 
certain node has a plurality of fan-in edges, all the input cannot be executed 
5 simultaneously because of a resource constraint inside the functional device. 

Conditions attributable to the resource constraints of the functional device on 
the hardware are expressed as logical expressions. For example, when only one 
input data can be accepted in the node 305 (Boolean variable: decMPEG) and the 
node 306 (Boolean variable: oufvideo) shown in Fig. 3, the condition can be expressed 
10 by the following logical expressions. 

! (inDVD_decMPEG * inHDD_decMPEG) ( 20 ) 
! (inVideo_outVideo * decMPEG_outVideo) ( 21 ) 

When there is the above resource constraint, the expression (21 ) indicates 
that either the edge 313 (Boolean variable: inDVD_ decMPEG) or the edge 314 
15 (Boolean variable: inHDD_decMPEG) must be "0\ A constraint that a reading and a 
writing of data cannot be executed simultaneously because of a slow operating speed 
of the DVD-R/W disk can be expressed by the following logical expression. 

! (inDVD * outDVD) ( 2T) 
The conversion from the condition 6 into the logical expression is to narrow 
20 down configuration elements to be validated according to the needs. Specifically, 
when there is part already validated (for example, a functional device of an existing 
design) which is to be excluded from the validation from among the configuration 
elements to be validated, or when only a specific configuration element needs to be 
validated, a logical expression to narrow down validated items can be added. 
25 For example, in Fig. 3, when a designer decides that only an input/output 
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sequence that requires the use of the encoder 204 is necessary, a constraint 
expressed by the following logical expression may be added. 

encMPEG = 1 (23) 
Fig. 9 is a flowchart of an example of a validation item extraction process of 

5 the validation support apparatus according to the first embodiment. First, the 

validation support apparatus decides whether the functional block diagram 200 as the 
functional configuration information shown in Fig. 2 is input (step S901). When the 
functional block diagram 200 is input (Yes at step S901 ), the validation support 
apparatus converts the functional block diagram 200 into the graph 300 shown in Fig. 3 

10 (step S902). 

The validation support apparatus decides whether the conditions regarding 
the input/output sequence are input (step S903). When the conditions regarding the 
inn. t/mrtout seauence are input (Yes at step S903), the validation support apparatus 

.. r 

converts the conditions 1 to 6 into the logical expressions (1 ) to (23) using the Boolean 
15 algebra (step S904). The validation support apparatus generates the validation item 
functions from the logical expressions (1 ) to (23) obtained by the conversion (step 
S905). 

The generation of the validation item functions will be explained in detail. In 
the example shown in Fig. 3, all the logical expressions (1) to (22) need to be "1". 
20 Therefore, a logical sum of all the logical expressions (1 ) to (22) becomes the validation 
item function. When the apparatus to be validated is a large-scale LSI, for example, 
this validation item function has a possibility of being expressed by a very complex 
logical expression. 

In this case, it is preferable that the validation item function is expressed using 
25 the BDD shown in Fig. 7. Fig. 10 to Fig. 12 illustrates an example of these validation 
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item functions. The validation item functions are illustrated in the format of a table in 
Fig. 1 0 to Fig. 1 2 for the sake of convenience, because a large graph becomes 
necessary to express these validation item functions in the graph of the BDD shown in 
Fig. 7. 

In Fig. 10 to Fig. 12, *'0_node at the edge side" indicates a node connected to 
the edge to be followed when the Boolean variable in the table shown in Fig. 11 is "0" 
"1_node at the edge side" indicates a node connected to the edge to be followed when 
the Boolean variable is "1". 'Val_0" and 'VaM" represent nodes of constants 0 and 1 
respectively. 

The validation support apparatus extracts validation items from the generated 
validation item functions (step S906). The extraction of the validation items is to list 
the sets of Boolean variables that make the validation item function as "1". In other 
words, the validation support apparatus extracts all combinations of variables that fulfill 
the condition by changing the variables of the validation item functions to "0" or "1 ". 

In other words, thirteen validation items of (a) to (m) listed below can be 
extracted by following the path to the "1_node". 

(a) "inVideo, inDVD, decMPEG encMPEG outVideo, outHDD, 
inVideo_encMPEG inDVDjdecMPEG decMPEG_oufvideo, encMPEG_outHDD" 

(b) "inVideo, inHDD, decMPEQ encMPEG outVideo, outDVD, outHDD, 
inVideo_encMPEG inHDD_decMPEG decMPEG_outVideo, encMPEG_outDVD, 
encMPEG_outHDD" 

(c) "inVideo, inHDD, decMPEG encMPEG outVideo, outDVD, 
inVideo_encMPEG inHDD_decMPEG decMPEG_outVideo, encMP EG_outDVD' 

(d) "inVideo, inHDD, decMPEG encMPEG outVideo, outHDD, 
inVideo_encMPEG inHDD_decMPEG decMPEG_outVideo, encMPEG_outHDD" 
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(e) "inVideo, encMPEG outVideo, outDVD, outHDD, inVideo_outVideo, 
inVideo_encMPEG encMPEG_outDVD, encMPEG_outHDD" 

(f) "inVideo, encMPEG outVideo, outDVD, inVideo_outVideo, 
inVideo_encMPEG encMPEG_outDVD 

5 (g) "inVideo, encMPEG outVideo, outHDD, inVideo_outVideo, 
inVideo_encMPEG encMPEG_outHDD" 

(h) "inVideo, encMPEG outDVD, outHDD, inVideo_encMPEG 
encMPEG_outDVD, encMPEG_outHDD" 

(i) "inVideo, encMPEG outDVD, inVideo_encMPEG encMPEG_outDVD" 
10 (j) "inVideo, encMPEG outHDD, inVideo_encMPEG encMPEG_outHDD" 

(k) "inVideo, outVideo, inVideojoutVideo" 

(I) "inDVD, decMPEG outVideo, inDVD_decMPEG decMPEG_outVideo" 
tm\ "inHDD decMPEG outVideo, inHDD_decMPEG decMPEG_outVideo" 

When the validation item (a) is looked at among the validation items of (a) to 
15 (m), the following two paths in the graph 300 shown in Fig. 3 can be obtained: 
Path 1 : node 301 -> edge 312 -> node 304 -> edge 317 node 308, and 
Path 2: node 302 -> edge 313 node 305 -> edge 315 ^ node 306. 

The path 1 is expressed by using the Boolean variables as follows: "inVideo" 
"inVideo.encMPEG" -> "encMPEG" "encMPEG_outHDD" "outHDD". The 
20 path 2 is expressed by using the Boolean variables as follows: "inDVD" -> 
"inDVDjdecMPEG" -» "decMPEG" -> "decMPEG_outVideo" ^ "outVideo". 

A path is extracted from the validation items as described above, and an 
executable input/output sequence is obtained from the extracted path. Specifically, a 
validation environment is created as a control command or the like that prescribes a 
25 data flow along the extracted path, thereby to make it possible to generate an 
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executable input/output sequence. The input/output sequence that becomes the 
validation pattern flows in this validation environment to validate the apparatus to be 

validated such as the LSI. 

As explained above, according to the first embodiment of the present 
invention, validation items that become a clue to the obtaining of the executable 
input/output sequence can be extracted from a combination of the functional devices 
201 to 208. As a result, designer's validation efficiency can be improved. 

When the validation item functions are complex, a total number of the 

validation items becomes too large, which is not realistic to list all the validation items. 

As the validation item functions are expressed in the BDD, the total number of the 

validation items can be calculated by counting the number of paths following the paths 

tothe"1_node". 

As exolained above, according to the first embodiment of the present 
invention, the number of validation items can be calculated efficiently by expressing the 
validation item functions in the BDD, without listing the validation items. Therefore, 
the designer can decide whether to decrease the validation items by referring to the 
calculated number of validation items. The validation efficiency can be improved by 
avoiding the validating of unnecessary validation items. 

Further, according to the first embodiment of the present invention, when the 
validation support apparatus decides that the number of validation items is too large as 
a result of counting the calculated number, the number of the validation items can be 
decreased as follows. For example, the logical expression obtained from the 
condition 6 (a condition that limits a configuration element to be validated among the 
configuration elements 201 to 208 and 211 to 21 8 that constitute the functional block 
j diagram 200) is added, and validation items are extracted again. 
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With this arrangement, the designer can exclude validation items that the 
designer considers as unnecessary. For example, when the designer decides that 
only the validation items requiring the use of the encoder 204 are necessary, 
"endMPEG = 1" as the logical expression (23) may be added to the constraint 
5 By placing a priority order to the validation items to be extracted, n validation 

items set in advance may be extracted thereby to decrease the number of validation 
items. The extraction process will be explained with reference to Fig. 1 3. First, the 
validation support apparatus decides whether the validation item extraction unit 609 
extracted validation items (step S1301). When the validation support apparatus 
10 decides that the validation items are extracted (Yes at step S1301 ), the validation 
support apparatus decides whether the limit number of validation items is input in 

advance (step S1302). 

When the limit number n of the validation items is input in advance (Yes at 
step S1302), the validation support apparatus decides whether the extracted number 
15 of validation items is larger than the limit number n (step S1 303). When the extracted 
number of validation items is larger than the limit number n (Yes at step S1 303), the 
validation support apparatus calculates the validation cost of each validation item by 
referring to the validation cost database 607 (step S1304). 

The validation support apparatus outputs the validation items up to the n-th 
20 order starting from a validation item of the largest validation cost (step S1 305). On the 
other hand, when the limit number n of validation items is not input in advance (No at 
step S1 302), or when the extracted number of validation items is not more than the 
limit number n (No at step S1303), the validation support apparatus outputs straight the 
validation items extracted at step S1301 (step S1306). 
25 According to the above method, important validation items to be validated can 



21 



be extracted with priority, by adding validation costs to the n validation items 
determined in advance. Therefore, the designer can validate the validation items 
corresponding to the significance of the validation items, and can improve the 
validation precision of the apparatus to be validated. 
5 While a single validation support apparatus supports the validation of an 

apparatus to be validated in the first embodiment, the validation is systematized by 
using a network to support the validation of the apparatus to be validated in a second 
embodiment of the present invention. Fig. 14 is a schematic diagram of a validation 
support system according to the second embodiment. 
10 As shown in Fig. 14, a validation support system 1400 has a validation 

support apparatus 1401 that functions as a server, and information terminal 
apparatuses 1402. The validation support apparatus 1401 and the information 
terminal apparatuses 1402 are connected to each other via a network 1403 like a LAN 
or a wide area network (WAN). Hardware configurations of the validation support 
15 apparatus 1401 and the information terminal apparatuses 1402 are the same as those 
of the apparatuses shown in Fig. 1 , and their explanation will be omitted. 

Afunctional configuration of the information terminal apparatus 1402 will be 
explained first. Fig. 1 5 is a block diagram of a functional configuration of an 
information terminal apparatus 1402 according to the second embodiment. In the 
20 second embodiment, the information terminal apparatus 1402 creates functional 
configuration information to extract validation items, and transmits this information to 
the validation support apparatus 1 401 that functions as the server. 

The information terminal apparatus 1402 can create the functional 
configuration information in a predetermined description language such as a UML. 
25 As one example of the functional configuration information, a use case diagram or a 
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sequence diagram is available. A creation of the functional configuration information 
by using the use case diagram will be explained. 

As shown in Fig. 15, the information terminal apparatus 1402 comprises an 
input unit 1501 , a use case display information database 1502, a use case description 
5 information database 1 503, an actor description information database 1 504, an 
information creation unit 1505, a description information conversion unit 1506, a 
communication unit 1507, and an output unit 1508. 

An operation is input to the information creation unit 1505 from the input unit 
1 501 . The keyboard 1 1 0 or the mouse 1 1 1 shown in Fig. 1 is used to achieve the 
10 function of the input unit 1 501 . The use case display information database 1 502 
stores a use case as display information of a functional device out of the use case 
diagram that illustrates the functional configuration of the apparatus to be validated. 
Fig. 16 is an explanatory diagram of a configuration of data stored in the use case 
display information database 1 502. As shown in Fig. 1 6, the use case display 
15 information database 1 502 stores design information of functional devices and use 
case information corresponding to each other. 

The use case description information database 1503 stores use case 
description information to be inserted into the use case. Fig. 1 7 is a configuration of 
data stored in a use case description information database 1503 of the information 
20 terminal apparatus according to the second embodiment. As shown in Fig. 1 7, the 
use case description information database 1503 stores functions representing the 
operation of the functional devices by relating the functions to coded code information A 
toO. 

The actor description information database 1 504 stores names of actors 
25 displayed in the use case diagram. Fig. 1 8 is a configuration of data stored in an actor 
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description information database 1504 of the information terminal apparatus according 
to the second embodiment. As shown in Fig. 1 8, the actor description information 
database 1 504 stores names of the functional devices that become the actors, by 
relating these names to coded code information aaaaa to ggggg. 
5 The use case display information database 1 502, the use case description 

information database 1 503, and the actor description information database 1 504 
achieve their functions using the ROM 102, the RAM 103, the HD 105, and the FD 107 
shown in Fig. 1 . 

As shown in Fig. 15, the information creation unit 1505 creates the use case 
10 diagram by using the use case stored in the functional device display information and 
the use case description information stored in the use case description information 
database 1 503, according to the operation input from the input unit 1 501 . Fig. 1 9 is a 
use case diagram of an apparatus to be validated created by the information terminal 
apparatus according to the second embodiment. 
1 5 The information creation unit 1 505 creates a validation environment by using 

the use case description information stored in the use case description information 
database 1 503, according to the operation input from the input unit 1 501 . The 
validation environment is a control command or the like that prescribes a data flow 
along a path extracted from the validation item. The validation environment includes 
20 a condition that prescribes an operation timing of a functional device corresponding to 
a node on a path, a condition that prescribes an order of functional devices 
corresponding to the nodes that passes through the path, and contents of data input to 
and output from the functional devices. 

The description information conversion unit 1506 converts the use description 
25 information and the actor description information described in the use case diagram 
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created by the information creation unit 1 505, into the code information illustrated in Fig. 
1 7 and Fig. 1 8. Fig. 20 is a use case diagram in which description information 
included in the use case diagram shown in Fig. 19 is converted into code information , 
which is contained in information transmitted from the validation support apparatus 
5 1 401 via the network 1 403, to the use case description information illustrated in Fig. 1 7 
and Fig. 18. 

The CPU 101 executes programs stored in the ROM 102, the RAM 103, the 
HD 1 05, and the FD 1 07, or via the l/F 1 09 to achieve the functions of the information 
creation unit 1505 and the description information conversion unit 1506 respectively. 
1 o The communication unit 1 507 transmits the use case diagram converted by 

the description information conversion unit 1 506 and the validation environment to the 
validation support apparatus 1 401 via the network 1 403. The communication unit 
1 507 also receives the information transmitted from the validation support apparatus 
1 401 via the network 1 403. The communication unit 1 507 specifically achieves its 
1 5 function via the l/F 1 09 shown in Fig. 1 . 

The output unit 1508 outputs the use case diagram (see Fig. 19) created by 
the information creation unit 1505, the use case diagram (see Fig. 20) obtained by 
conversion by the description information conversion unit 1506, and the information 
transmitted from the validation support apparatus 1 401 via the network 1 403. The 
20 display 1 08 or the printer 113 shown in Fig. 1 achieves the function of the output unit 
1508. 

Afunctional configuration of the validation support apparatus 1401 according 
to the second embodiment of the present invention will be explained next. Fig. 21 is a 
block diagram of a functional configuration of the validation support apparatus 1 401 
25 according to the second embodiment. The validation support apparatus 1401 
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functions as a server. As shown in Fig. 21 , the validation support apparatus 1 401 
comprises a communication unit 2100, the graph conversion unit 602, the logical 
expression conversion unit 604, the validation item function generation unit 605, the 
validation item function memory unit 606, a validation item extraction unit 2101 , a 

5 validation cost calculation unit 21 02, a validation cost database 21 03, and an 

input/output sequence creation unit 21 04. The graph conversion unit 602, the logical 
expression conversion unit 604, the validation item function generation unit 605, and 
the validation item function memory unit 606 have similar configurations to those 
according to the first embodiment shown in Fig. 6, and their explanation will be omitted. 

10 The validation item extraction unit 21 01 extracts validation items from the 

validation items stored in the validation item function memory unit 606. The validation 
cost calculation unit 21 02 calculates validation costs based on the validation items 
extracted from the validation item extraction unit 2101 , and the costs from the validation 
cost database 2103. 

15 Fig. 22 is a configuration of data stored in a validation cost database 2103 of 

the validation support apparatus according to the second embodiment. The validation 
cost database 21 03 stores use cases corresponding to costs. A cost "1 " is applied to 
the use case of an existing design, a cost "2" is applied to the use case of a diversion 
design, and a cost "5" is applied to the use case of a new design. 

20 The input/output sequence creation unit 21 04 creates an input/output 

sequence based on the validation environment transmitted from the information 
terminal apparatus 1402, and the validation items extracted by the validation item 
extraction unit 21 01 . The CPU 1 01 executes programs stored in the ROM 1 02, the 
RAM 103, the HD 105, and the FD 107, or via the l/F 109 shown in Fig. 1 to achieve 

25 the functions of the validation item extraction unit 21 01 , the validation cost calculation 
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unit 21 02, and the input/output sequence creation unit 21 04. The ROM 1 02, the 
RAM 103, the HD 105, and the FD 107 shown in Fig. 1 achieve the function of the 
validation cost database 21 03. 

The extraction process of the validation support apparatus according to the 
second embodiment will be explained. Fig. 23 is a flowchart of an example of an 
extraction process of the validation support apparatus according to the second 
embodiment. When the validation support apparatus receives the use case diagram 
(see Fig. 20) having coded actor description information and coded use case 
description information from the information terminal apparatus 1402 (Yes at step 
S2301), the validation support apparatus decides whether a condition concerning the 
input/output sequence is received (step S2302). When the condition concerning the 
input/output sequence is received (Yes step S2302), the validation support apparatus 
executes the validation item extraction processing based on the received use case and 
the input/output sequence (step S2303). 

This validation item extraction processing is similar to that at step S901 to step 
S906 (see Fig. 9) according to the first embodiment, and the explanation of this 
processing will be omitted. The validation support apparatus calculates validation 
costs from the detected validation items (step S2304), and transmits the validation 
items and the validation costs to the information terminal apparatus 1402 (step S2305). 
Fig. 24 is a table of validation items and validation costs extracted by the validation 
support apparatus according to the second embodiment. 

Fig. 24 illustrates five kinds of validation items from No. 1 to No. 5. For 
example, at the validation item No. 1 , data input from the input unit aaaaa is input to a 
functional device N via a functional device A and a functional device I. Data input frorr 
the input unit bbbbb is input to the functional device N via a functional device B and a 
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functional device C. Data from the functional device I and the functional device J are 
output from the output unit ddddd via the functional device N and a functional device E. 

A cost of the use case of the functional device A is "1 ", a cost of the use case 
of the functional device B is "1", a cost of the use case of the functional device I is "1", a 
5 cost of the use case of the functional device J is "1", a cost of the use case of the 
functional device N is "1", and a cost of the use case of the functional device E is "2". 
Therefore, the validation cost of the validation item No. 1 is "7" as a sum of these costs. 

Similarly, the validation support apparatus calculates validation costs of the 
validation item No. 2 to No. 5. As shown in Fig. 24, the validation cost of the validation 
10 item No. 2 is "18", the validation cost of the validation item No. 3 is "6", the validation 
cost of the validation item No. 4 is "18", and the validation cost of the validation item No. 
5 is "4". 

The information terminal apparatus 1402 receives the validation items and the 
validation costs, and decodes the validation items and the validation costs by referring 
15 to the use case description information database 1503, and the actor description 

information database 1504. Fig. 25 is a table of validation items and validation costs 
that are converted into original description information from code information included 
in the validation items and the validation cost shown in Fig. 24. It is clear from Fig. 25 
that the validation costs of the validation item No. 2 and No. 4 are the largest. 
20 Consequently, a person to perform validations can validate the validation items starting 
from an item having the largest validation cost with priority. 

As the validation item also displays the use case, the person to perform 
validations can judge whether the functional device that constitutes the validation item 
corresponds to an existing design, a diversion design, or a new design. Therefore, as 
25 well as a detection cost, the type of design can be a criterion in the selection as to 
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which item is to be given priority for the validation. 

For example, as the validation cost of the validation item No. 1 is '7" and the 
validation cost of the validation item No. 3 is "6", the validation item No. 1 is validated 
with priority over the validation item No. 3. However, the validation item No. 1 has one 
5 use case of the diversion design, and the validation item No. 3 has two use cases of 
the diversion design. Therefore, the designer can validate the validation item No. 3 
with priority over the validation item No. 1 . 

The creation process of the input/output sequence will be explained next. 
Fig. 26 is a flowchart illustrating the input/output sequence creation process. First, the 
1 o validation support apparatus decides whether a validation item is extracted (step 
S2601 ). When the validation support apparatus decides that a validation item is 
extracted (Yes at step S2601 ), the validation support apparatus decides whether the 
validation environment is received (step S2602). When the validation environment is 
received (Yes at step S2602), the validation support apparatus creates the input/output 
1 5 sequence (step S2603), and transmits the created input/output sequence to the 
information terminal apparatuses 1402 (step S2604). 

According to Fig. 27, the validation environment is that reset = 1 at time 0, that 
reset = 0 at time 1 or afterward, that data_A = D1 for code information (A), that data_B 
= D2 for code information (B), and that mode_E = 1 for code information (E). 
20 The validation support apparatus creates the input/output sequence based on 

the validation items detected by the validation item extraction unit 609. For example, 
the validation support apparatus creates the input/output sequence as shown in Fig. 28 
for the validation item No. 1 shown in Fig. 24. Specifically, from the validation item No. 
1 , the validation support apparatus extracts a path in which the functional device A 
25 inputs analog audio, the functional device B inputs analog video, and the functional 
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device E outputs an MPEG stream. 

When the validation environment is given, a time chart (i.e., input/output 
sequence) as shown in Fig. 29 can be created. According to this time chart, at time 1 
and afterward, the functional device A inputs the analog audio D1 , the functional device 

5 B inputs the analog video D2, and the functional device E outputs the MPEG stream. 

With the above arrangement, the input/output sequence can be provided to 
the designer. The validation support apparatus can give the provided input/output 
sequence directly to the apparatus to be validated without requiring the designer to 
create the input/output sequence. Accordingly, the validation efficiency can be 

10 improved. 

As explained above, according to the second embodiment of the present 
invention, in the information terminal apparatus 1402, the input unit, the output unit, and 
the functional devices that constitute the created use case diagram are coded. 
Therefore, the use case can be made secret. Similarly, the input unit, the output unit, 
15 and the functional devices that are coded extract the validation items. Therefore, the 
validation items can be made secret. 

Consequently, the designer as the provider of the use case diagram can 
provide the use case diagram to the validation support apparatus while making the 
contents of the use case diagram confidential. The validation support apparatus can 
20 extract the validation items even if the description information contained in the use case 
diagram is coded. As a result, the validation support apparatus can provide a 
high-safety validation support 

In the second embodiment, the information terminal apparatus 1402 converts 
the use case description information and the actor description information into code 
25 information, thereby to make secret the use case description information and the actor 
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description information. Alternatively, the character strings of the use case description 
information and the actor description information can also be encrypted according to a 
known encryption technique. With this arrangement, the validation support apparatus 
can similarly provide a high-safety validation support. 

5 According to the first and second embodiments, the validation support 

apparatus 1401 can extract validation items that are necessary for an executable 
input/output sequence. Therefore, the validation support apparatus 1401 can validate 
the apparatus to be validated easily and efficiently Consequently, the designing 
period can be shortened. 

1 o Further, a computer such as a personal computer or a workstation can 

execute a program created in advance to achieve the validation support method 
according to the first and second embodiments. This program is recorded on a 
computernreadable recording medium such as a hard disk, a flexible disk, a CD-ROM, 
an MO, or a DVD. The computer reads the program from the recording medium to 

1 5 execute the program. This program may be a transmission medium that can be 
distributed via a network such as the Internet. 

The validation support apparatuses explained in the first and second 
embodiments are suitable to support the validation of an electronic apparatus using an 
LSI such as a DVD/HDD video recorder, a portable telephone, and a navigation 

20 system. 

As explained above, according to the present invention, validation items that 
are necessary for an executable input/output sequence can be extracted. Therefore, 
the validation support apparatus can validate the apparatus to be validated easily and 
efficiently. Consequently, there is an effect that the designing period can be 
25 shortened. 



Although the invention has been described with respect to a specific 
embodiment for a complete and clear disclosure, the appended claims are not to be 
thus limited but are to be construed as embodying all modifications and alternative 
constructions that may occur to one skilled in the art which fairly fall within the basic 
5 teaching herein set forth. 
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